Bank Loan Recovery Agent Rights and Limits India (2026)

In March 2026, a borrower in Kochi received fourteen phone calls in one day from recovery agents demanding immediate payment on her personal loan, threatening to visit her workplace and inform her employer — a practice the Reserve Bank of India's Fair Practices Code prohibits and that the Bharatiya Nyaya Sanhita (BNS), 2023 treats as criminal intimidation and extortion when carried to that length.

Bank loan recovery agents in India may contact borrowers by phone, SMS, or registered mail only between 8:00 AM and 7:00 PM, may visit the registered address only with prior notice and a bank-issued identity card, and may only request voluntary payment. They cannot enter a home without permission, threaten arrest (only courts can issue warrants), contact employers or relatives, abuse or intimidate (criminal intimidation under section 351 and extortion under section 308 of the BNS, 2023), seize a vehicle or property without a SARFAESI Act 2002 possession order or a court decree, or disclose loan details to third parties in breach of the Digital Personal Data Protection Act, 2023. Violations can be taken to the bank's Nodal Officer, then to the RBI Ombudsman under the Reserve Bank - Integrated Ombudsman Scheme, 2026 (RB-IOS 2026) at cms.rbi.org.in / toll-free 14448, and, where criminal offences are involved, to the police as an FIR.

• What recovery agents are legally allowed to do
• Eight hard limits recovery agents cannot cross
• SARFAESI Act 2002 secured loan possession rules
• BNS 2023 criminal provisions against harassment
• RBI Fair Practices Code obligations on banks
• Step-by-step complaint escalation path
• When to file FIR and which police station
• Sample legal notice to bank and recovery agency
• Court remedies and case-law touchpoints

Recovery agents are third-party contractors, or employees of Asset Reconstruction Companies, appointed by banks and Non-Banking Financial Companies (NBFCs) to collect overdue loans. Their authority derives only from the contract between the lender and the agency. They are not law-enforcement officers, have no power to arrest, and hold no magistrate's powers.

Under the RBI Fair Practices Code and the RBI directions on engagement of recovery agents (issued under section 35A of the Banking Regulation Act, 1949 for banks, and section 45L of the RBI Act, 1934 for NBFCs), recovery agents may:

1. Contact the borrower by telephone, SMS, email or WhatsApp only between 8:00 AM and 7:00 PM. Calling outside this window, or persistently bothering the borrower at odd hours, is treated by the RBI as undue harassment and a breach of the Fair Practices Code.

2. Visit the registered address stated in the loan agreement or KYC records, provided the agent carries a valid identity card issued by the bank or NBFC, displays it on request, and hands over a written visit summary.

3. Request voluntary payment or negotiate a one-time settlement, provided the borrower consents and the settlement is documented in writing.

4. Send legal notices on behalf of the lender under section 13(2) of the Securitisation and Reconstruction of Financial Assets and Enforcement of Security Interest (SARFAESI) Act, 2002, in the case of secured loans where the account is classified as a Non-Performing Asset.

Recovery agents have no power to “arrest” anyone or to threaten police action. Only a magistrate can issue an arrest warrant, and a plain loan default is a civil liability, not a crime, unless the loan itself was obtained by fraud or cheating under the BNS, 2023.

Under section 35A of the Banking Regulation Act, 1949 read with the RBI's directions on outsourcing of financial services, the bank or NBFC remains fully responsible for the conduct of its recovery agents. The borrower can therefore sue the lender itself, not only the agency.

The following acts by recovery agents breach the Banking Regulation Act, RBI directions, the BNS, 2023 and the Consumer Protection Act, 2019. Each one gives the borrower independent grounds for complaint.

1. Entry into home or workplace without consent

A recovery agent who enters a borrower's flat, office or compound without permission commits criminal trespass under section 331 of the BNS, 2023. Forced entry, pushing past a gatekeeper or threatening residents can also amount to house-trespass after preparation for hurt, assault or wrongful restraint.

2. Contact with employer, relatives or neighbours

The RBI Fair Practices Code prohibits disclosure of loan details or default status to anyone other than the borrower, co-borrower or guarantor. Calling the borrower's HR department, messaging a spouse or relatives, or discussing dues with a housing-society secretary breaches that norm and also violates the Digital Personal Data Protection Act, 2023 (processing of personal data without consent). A complaint to the RBI Ombudsman on the ground of “breach of Fair Practices Code” is maintainable.

3. Threats of arrest, police case or jail

A plain loan default is a civil dispute. The BNS, 2023 does not criminalise non-payment of an EMI unless the loan was obtained by cheating under section 318 (or by personation under section 319), or the borrower issued a dishonoured cheque for repayment (an offence under section 138 of the Negotiable Instruments Act, 1881, which remains in force). A recovery agent who says “I will have you arrested” or “I will file a police case” commits criminal intimidation under section 351 of the BNS, 2023, punishable with imprisonment up to two years or fine or both. Record the call (lawful when you are a party to the conversation), note the date, time and agent's name, and attach the recording to the RBI Ombudsman complaint.

4. Seizure of vehicle or property without SARFAESI or court order

For secured loans (home loan with mortgage, vehicle loan with hypothecation), the bank must follow the SARFAESI Act 2002 procedure: issue a section 13(2) demand notice, allow the borrower to reply, take possession only under section 13(4), and then publish and conduct an auction in the manner prescribed by the Security Interest (Enforcement) Rules, 2002. A recovery agent who drives away a borrower's car or changes the locks on a flat before that process is complete commits theft or criminal misappropriation under the BNS, 2023. For unsecured loans (personal loan, credit-card dues), there is no right to seize any asset without a civil-court decree and a court-appointed receiver.

Even under SARFAESI, the borrower has a right to appeal to the Debt Recovery Tribunal (DRT) under section 17 of the SARFAESI Act within 45 days of the section 13(4) measure. The Tribunal can grant an interim stay against further possession or sale.

5. Abuse, use of force, or damage to property

Any physical contact, abusive language, deflating tyres, breaking gates or spray-painting “defaulter” slogans on walls amounts to criminal assault or mischief under the BNS, 2023 (including assault or use of criminal force to outrage a woman's modesty under section 74, voluntarily causing hurt under section 115, mischief under section 324, and criminal intimidation under section 351). An FIR can be registered at the local police station under section 173 of the BNSS, 2023, which requires the police to register information about a cognizable offence. If the police hesitate on the ground that the matter is “civil”, cite Lalita Kumari v. Government of Uttar Pradesh, (2014) 2 SCC 1, where the Supreme Court held that registration of an FIR is mandatory for a cognizable offence.

6. Calls outside 8:00 AM–7:00 PM, or repeated harassment

Calling before 8:00 AM or after 7:00 PM, or persistently bothering the borrower at odd hours, violates the Fair Practices Code. Maintain a call log from your phone, complain to the bank's grievance redressal officer, and escalate to the RBI Ombudsman if the matter is not resolved within 30 days.

7. Misrepresentation as police, court officer or government official

Personating a public servant is an offence under section 205 of the BNS, 2023, punishable with imprisonment up to two years. Recovery agents wearing fake police uniforms, claiming to be from a “cybercrime department”, or issuing documents that look like court summons commit this offence. Photograph or video-record the impersonation where it is safe to do so, and file an FIR.

8. Public shaming or social-media disclosure

Posting a borrower's photograph, name, loan amount or default status on Facebook, WhatsApp groups or a colony notice board violates the right to privacy affirmed in Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1, the Digital Personal Data Protection Act, 2023, and the Fair Practices Code. It is also defamation under section 356 of the BNS, 2023, giving the borrower a civil remedy for damages in addition to a criminal complaint.

The SARFAESI Act, 2002 applies to secured loans — loans backed by a mortgage of immovable property or hypothecation of movable property (such as a vehicle). It does not apply to agricultural land (subject to specific exceptions) or to unsecured lending such as personal loans or credit-card dues.

Step 1: Section 13(2) demand notice (60-day period)

The secured creditor issues a written notice demanding payment of the outstanding amount within 60 days. The notice must state the dues, the security interest, and the borrower's right to make representation. Service is normally by registered post or speed post with acknowledgment due.

Step 2: Borrower reply or representation

Within the 60-day window, the borrower may (a) pay the dues and close the matter; (b) seek restructuring or one-time settlement in writing; or © submit a written reply disputing the dues or the validity of the notice. The lender must consider the representation and communicate its decision in writing.

Step 3: Section 13(4) possession (if dues remain unpaid)

After 60 days, if dues remain unpaid or the representation is rejected, the lender takes symbolic or actual possession under section 13(4) of the Act, in accordance with the Security Interest (Enforcement) Rules, 2002.

Step 4: Section 17 appeal before the DRT (45 days)

Under section 17 of the SARFAESI Act, the borrower may file a Securitisation Application before the Debt Recovery Tribunal within 45 days from the date of the section 13(4) measure, seeking a stay or setting-aside of possession or sale. The DRT can grant interim relief and, if it allows the application, restore possession. A further appeal lies to the Debt Recovery Appellate Tribunal (DRAT) under section 18.

Step 5: Physical possession and sale

Once the section 17 proceedings conclude, or the 45-day window lapses without an application, the lender may take physical possession and sell the asset. Public-sale notice must be issued under the Rules, published in two newspapers (one in a vernacular edition), and the auction conducted in the prescribed manner. Any surplus after the secured dues are satisfied is returned to the borrower; any shortfall remains the borrower's liability.

If the lender skips any of these steps — no 13(2) notice, no proper service, sale without public notice — the SARFAESI action can be challenged before the DRT, and in appropriate cases in a writ petition under Article 226 of the Constitution before the High Court.

The Bharatiya Nyaya Sanhita (BNS), 2023, which replaced the Indian Penal Code, 1860 with effect from 1 July 2024, provides the following remedies against recovery-agent harassment:

Section 351: Criminal intimidation

Threatening another with injury to person, reputation or property with intent to cause alarm is criminal intimidation. Punishment: imprisonment up to two years or fine or both; if the threat is to cause death or grievous hurt, up to seven years.

Example: an agent says “I will make sure you lose your job” or “I will tell your daughter's school”.

Section 308: Extortion

Intentionally putting any person in fear of injury and thereby dishonestly inducing that person to deliver property is extortion. Punishment: imprisonment up to three years or fine or both.

Example: an agent demands ₹50,000 in cash “to stop the case”, even though the contractual due is lower.

Section 331: Criminal trespass

Entering or remaining in property in the possession of another with intent to commit an offence or to intimidate is criminal trespass. Punishment: imprisonment up to three months, or fine up to ₹5,000, or both.

Section 356: Defamation

Making or publishing an imputation concerning any person, intending to harm their reputation, is defamation. Punishment: imprisonment up to two years or fine or both.

Section 74: Assault or criminal force to a woman with intent to outrage her modesty

Punishable with imprisonment of not less than one year, extending to five years, and with fine.

Section 115: Voluntarily causing hurt

Punishment: imprisonment up to one year, or fine up to ₹10,000, or both (higher where the hurt is more serious).

Criminal intimidation (section 351) and extortion (section 308) are cognizable offences, so the police cannot refuse to register an FIR on the ground that the underlying loan dispute is “civil”. An FIR creates a permanent record and is the strongest deterrent against further harassment.

The RBI's Fair Practices Code for lenders is issued under section 35A of the Banking Regulation Act, 1949 (for banks) and section 45L of the RBI Act, 1934 (for NBFCs). It is binding on scheduled commercial banks, small finance banks, payments banks and NBFCs (including housing finance companies regulated by the National Housing Bank for this purpose).

The Code and the RBI's directions on engagement of recovery agents require, in substance:

1. The bank or NBFC must put in place a board-approved Fair Practices Code and a written recovery policy, and disclose it on its website.
2. The lender and its agents must not resort to intimidation or harassment — verbal or physical — against the borrower or family members.
3. Recovery agents must identify themselves and display the authority letter from the bank; the borrower is entitled to verify the agent's credentials by calling the bank's customer care.
4. The lender is responsible for the actions of its recovery agents and is accountable for any violation.
5. Borrower information must not be disclosed to third parties (other than credit bureaus, legal counsel, or as required by law).
6. The lender must run an internal grievance mechanism with a designated Nodal Officer, and must reply to a written complaint within 30 days.

If the bank does not resolve the complaint within 30 days, the borrower can escalate to the RBI Ombudsman under the Reserve Bank - Integrated Ombudsman Scheme, 2026 (RB-IOS 2026) — see the next section. The RBI can also take supervisory action against the lender, including monetary penalty, for breaches of the Fair Practices Code.

Day 1: Collect evidence

Keep a diary: date, time, caller or visitor's name, agency name (demand this on every contact), what was said or done. Record phone calls lawfully (a party to a conversation may record it). Photograph any physical visit, notice or property damage. Save SMS, WhatsApp messages and email.

Days 2–7: Written complaint to the bank's Nodal Officer

Send the complaint by email (with read receipt) and by registered post to the bank's Nodal Officer for grievance redressal — the name and contact are published under “Customer Grievance Redressal” or “Fair Practices Code” on the bank's website. State:

1. Your loan account number and branch;
2. A factual narrative with dates, times and agent names;
3. The specific violations of the Fair Practices Code and the BNS sections involved;
4. The relief sought — cessation of harassment, written apology, deletion of any data shared with third parties, and compensation for any harm suffered;
5. That you reserve the right to approach the RBI Ombudsman and the courts if the matter is not redressed within 30 days.

Days 8–37: Bank investigation and reply

The bank must acknowledge the complaint and reply within 30 days. If the reply is unsatisfactory or no reply is received, proceed to the next step.

Days 38 onward: RBI Ombudsman complaint under RB-IOS 2026

File the complaint online at https://cms.rbi.org.in (the RBI Complaint Management System), by email to [email protected], by post to the Centralised Receipt and Processing Centre at Central Vista, Sector 17, Chandigarh-160017, or call the toll-free number 14448. The scheme covers “breach of Fair Practices Code” as a ground of complaint. Under RB-IOS 2026 (in force from 1 July 2026), the Ombudsman can award compensation up to ₹30 lakh for consequential financial loss and up to a further ₹3 lakh for harassment, time and expense. The Award is binding on the regulated entity; the complainant can accept it or reject it and pursue other remedies.

If criminal offences are involved — in parallel:

Lodge an FIR at the local police station (see the next section). Criminal proceedings, the RBI Ombudsman process and a consumer-forum complaint can run side by side.

Consumer forum / civil suit (parallel tracks):

1. Consumer Protection Act, 2019: File a complaint in the District Consumer Commission (claim up to ₹50 lakh), State Commission (₹50 lakh to ₹2 crore), or National Commission (above ₹2 crore) for deficiency in service and unfair trade practice. Online filing is available at https://e-jagriti.gov.in (the platform that now replaces the earlier e-jagriti.gov.in system).
2. Civil suit for damages: File in the District Court for compensation for mental agony, reputational harm and loss of business. The precedent is Manager, ICICI Bank Ltd. v. Prakash Kaur & Ors., (2007) 2 SCC 711, in which the Supreme Court deprecated the use of recovery agents and made clear that banks cannot disclaim liability for their conduct.
3. Criminal FIR: If BNS offences are involved, register the FIR under section 173 of the BNSS, 2023. If the police refuse, a private complaint can be filed before the Judicial Magistrate First Class under section 223 of the BNSS, 2023.

RBI Ombudsman and consumer-forum remedies are largely cost-free for the borrower (consumer complaints up to ₹5 lakh carry no ad-valorem court fee), and are faster than a civil suit. Civil suits give higher damages but take longer and involve court fees and advocate fees.

File an FIR immediately if:

1. Physical assault, threat of violence, or damage to property has occurred;
2. The agent impersonated a police or government officer;
3. The agent demanded money beyond the loan dues (extortion);
4. The agent entered the home without permission (criminal trespass).

Jurisdiction: the police station within whose limits the offence occurred has jurisdiction. Where the harassment was by phone, the offence is treated as having occurred where the call was received, so the FIR can be filed at the borrower's local police station.

What if the police refuse?

The police often say “It is a civil dispute” or “Go to the bank first”. Respond as follows:

1. Cite //Lalita Kumari// v. //Government of Uttar Pradesh//, (2014) 2 SCC 1 — registration of an FIR is mandatory for a cognizable offence.
2. Hand over a written, signed complaint and ask the officer to acknowledge receipt. If refused, send it by registered post to the Station House Officer and email the Superintendent of Police.
3. If still refused, file a complaint under section 223 of the BNSS, 2023 before the Judicial Magistrate First Class, attaching evidence of the refusal.

Sample FIR / police complaint:

To,
The Station House Officer,
[Police Station Name],
[City, PIN]

Subject: Complaint under sections 351 (criminal intimidation) and 331 (criminal trespass) of the Bharatiya Nyaya Sanhita, 2023.

Sir / Madam,

I, [Your Full Name], son/daughter/spouse of [Father/Spouse Name], residing at [Full Address], aged [Age], hereby lodge a formal complaint against:

1. Mr./Ms. [Agent Name], recovery agent of [Agency Name], mobile [Number].
2. [Bank/NBFC Name], acting through its authorised agent.

Facts:

On [Date], at approximately [Time] hrs, the above-named agent visited my residence without prior notice or my permission. Despite my refusal to allow entry, the agent pushed open the gate manned by my spouse and entered the compound, causing fear and alarm. The agent then shouted abusive language in front of my minor children, threatened to "get the police to arrest" me for loan default on my personal loan account [Account Number], and demanded immediate cash payment of ₹50,000, though the actual EMI due was ₹12,000.

The agent further stated, "I will inform your office and your children's school that you are a fraud," causing mental agony and reputational harm.

Offences committed:

- Section 331 of the BNS, 2023 (criminal trespass)
- Section 351 of the BNS, 2023 (criminal intimidation)
- Section 308 of the BNS, 2023 (extortion by threat)

Evidence:

Call recording, photograph of the agent at the gate (timestamped), and witness statement of spouse — attached.

I request you to register the FIR, investigate, and take action as per law.

Yours faithfully,
[Signature]
[Name]
[Mobile]
[Date]

Send this notice by registered post with acknowledgment due and by email (read receipt requested) to the bank's registered office, your branch manager, the recovery agency's head office, and the bank's Nodal Grievance Officer.

LEGAL NOTICE

To,
1. The Managing Director,
   [Bank Name],
   [Registered Office Address],
   [City, PIN]

2. The Branch Manager,
   [Branch Name and Address]

3. The Director,
   [Recovery Agency Name],
   [Registered Office Address]

From,
[Your Full Name],
[Your Address],
[City, PIN]
[Mobile / Email]

Date: [Date]

Subject: Notice for harassment by recovery agent in breach of the RBI Fair Practices Code and the Bharatiya Nyaya Sanhita, 2023.

Dear Sir / Madam,

I, [Your Name], hold a [Personal / Home / Auto] loan account number [Account Number] with your bank, sanctioned on [Sanction Date] for ₹[Amount] at [Interest Rate]% per annum for [Tenure].

Due to temporary financial hardship on account of [brief reason — for example, job loss or medical emergency], I was unable to pay the EMI for [Month]. I had informed your branch manager on [Date] and requested restructuring. Instead of addressing my request, your bank appointed [Recovery Agency Name], whose agent Mr./Ms. [Agent Name] engaged in the following acts:

1. On [Date] at [Time], the agent called my mobile [Number] repeatedly within a short window, in breach of the RBI Fair Practices Code on recovery-agent conduct.

2. On [Date], the agent visited my residence unannounced and entered my compound without my consent, committing criminal trespass under section 331 of the BNS, 2023.

3. The agent threatened to inform my employer and to post my photograph on social media, breaching the Fair Practices Code and committing criminal intimidation under section 351 and defamation under section 356 of the BNS, 2023.

4. The agent demanded ₹50,000 in cash immediately though the EMI due was ₹12,000, amounting to extortion under section 308 of the BNS, 2023.

5. The agent used abusive language in front of my minor children, causing mental agony.

These acts violate:

- The Reserve Bank of India Fair Practices Code for lenders;
- Section 35A of the Banking Regulation Act, 1949 (the bank is responsible for the acts of its agents);
- Sections 331, 351, 308 and 356 of the Bharatiya Nyaya Sanhita, 2023;
- The Consumer Protection Act, 2019 (deficiency in service and unfair trade practice).

DEMANDS:

1. Immediate cessation of all recovery calls and visits by the said agent and agency.
2. An unconditional written apology within 7 days of this notice.
3. Compensation of ₹5,00,000 (Rupees Five Lakh) for mental agony, reputational harm and legal expenses.
4. Written confirmation that no information about my loan has been, or will be, shared with any third party other than credit bureaus.
5. A single point of contact at the bank for all future communication on this loan account.

LEGAL REMEDIES IF NOT COMPLIED:

If the above demands are not met within 15 days, I shall proceed to:

- File a complaint with the RBI Ombudsman under the Reserve Bank - Integrated Ombudsman Scheme, 2026;
- File a consumer complaint under the Consumer Protection Act, 2019;
- Lodge an FIR under sections 331, 351, 308 and 356 of the BNS, 2023 at [Police Station];
- File a civil suit for damages.

This notice is without prejudice to my other rights and remedies under law.

Yours faithfully,

[Signature]
[Your Name]
[Date]

If the bank replies offering a settlement or apology, insist that it be reduced to writing on the bank's letterhead, signed by the branch manager or Nodal Officer. Verbal assurances are not enforceable.

Key judicial precedents:

Manager, ICICI Bank Ltd. v. Prakash Kaur & Ors., (2007) 2 SCC 711

The Supreme Court deprecated the use of recovery agents — described as “musclemen” — by banks and made it clear that the bank cannot escape responsibility for the manner in which its agents conduct recovery. Borrowers were held entitled to pursue remedies against the bank itself.

Lalita Kumari v. Government of Uttar Pradesh, (2014) 2 SCC 1

The Supreme Court held that registration of an FIR is mandatory on information relating to the commission of a cognizable offence; the police cannot avoid registration by treating the matter as a “civil dispute”. This applies directly to FIRs for criminal intimidation (section 351) or extortion (section 308) by recovery agents.

Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1

A nine-Judge Bench of the Supreme Court affirmed the right to privacy as a fundamental right under Article 21. Public shaming of a borrower or disclosure of loan details to third parties is inconsistent with that right, and now also falls within the statutory framework of the Digital Personal Data Protection Act, 2023.

Mardia Chemicals Ltd. v. Union of India, (2004) 4 SCC 311

The Supreme Court upheld the constitutional validity of the SARFAESI Act while reading in safeguards for borrowers, including the right to appeal to the Debt Recovery Tribunal under section 17. Strict compliance with the section 13 procedure — demand notice, representation, possession under section 13(4) — is mandatory.

RBI Ombudsman awards: Under the Reserve Bank - Integrated Ombudsman Scheme, 2026, the Ombudsman can award up to ₹30 lakh for consequential loss and up to a further ₹3 lakh for harassment, time and expense.

Civil suit for damages: A borrower can file a civil suit in the District Court under tort law (negligence, intentional infliction of mental distress) and contract law (breach of the implied term that the bank will deal fairly with the borrower). Common heads of claim are mental agony, reputational harm, loss of income and medical expenses for stress-related illness. Civil suits are slower than the RBI Ombudsman or the consumer forum and involve ad-valorem court fees, but can yield higher damages where the facts justify it.

For using the Right to Information route to obtain records a bank or telecom provider holds — such as call-detail records that can identify a withheld recovery-agent number — see The RTI Playbook. For a wider walk-through of all five complaint channels against recovery agents, see the companion guide on recovery-agent harassment.

Last reviewed: 17 July 2026.